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(57) Abstract: 

PROBLEM TO BE SOLVED: To realize high speed 
packet filtering independently of number of access lists. 

SOLUTION: Filter information to limit or permit passing 
of a specific packet Is set to access lists 1-1 -1-n. 
Packet information of a specific Input packet is 
registered in a filter cache table 5. A generating means 
4 generates a table key to be registered in the filter 
cache table 5 among filter information set to the access 
lists. A filter cache table registration means 3 
registers the packet information coincident in the 
filter information listed in the access lists to the 
filter cache table 5 based on of a table key. A 
retrieval means 2 retrieves the filter cache table 5 on 
the basis of the table key of the packet information of 
the received packet and discriminates transfer or abort 
of the received packet according to contents of the 
filter cache table when the result of retrieval is hit 
or uses the contents of the access lists when the result 
of retrieval is not hit. 
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2oSJ^Jl|^(?5A^]>'^■^•y ht^^-^ir-y ^•'tf|g^c:■OV^T 
IS7 -f yP^^-p -y i^iX-7'VP^1^^L, b -y b-riXJf 

vN-^--y hff)mm^tzimmt:'^^^. —Ij. sxb >y 

[ft*II 2 ] # -y h (riMi^trmmttzim'SS-t 
\^cr)y ^ )V'^^^'yi^a.'r--y'')Vt.. 

Huier^J'-bxyx htcis^$ixit7 •Y;u^"tf?gc?5r*i*^^ 

miiT^-^^V :^h<r>y ^ jv-t^mmt—WaLfz^'^ir -y h 

mMZy -i Ji-:^^^ -y 7'VU;SI|-f-S7 >f 

A- -y A7^— 7Vl^afi#Si: . 

•y v-j-T-— tCS-C5'V^-C 15157 ^' yW^^A' -y i^j. 

"T-y'iUirmmL. b -y h-rn.{i"^iS7 ;P^^-v -y 
AT— 7VP«0i^^tc Li^c*>-o -C m^:)l'''<^ -y h coWM. 
t.ti\imk^¥]^V. tt:\z -y h L^rttixJf mrlBT^-fe 
X U X h SriSffl-f-^ 7 -f yU^' -y v-i-T— 7'VP^5g^ 
Si: ^^-Ti. i: S:^*^g^^:-rl.^^"^^v h 7 >f yUrJ' 'J v^'" 

mi^ms'i muy ^>v9^^'yi^^7—y)v^-<^ 

^mi. luiBr^•feX';x^^07>f;^:5"ltfg^^°^;<-:5' 

iRJS 1 i fz\mM 2 leiKO^N'^r -y h 7 -f U 

[1**^14 ] Bui57 4 ;U^^-r -y i/A7"-7';W*i"1tm 
^?^£■t•i>i:#^c:{i. <X[I]J.m{i. b -y h Lfv:7 >f yl^:?^ 
-y i^:i.r—y)\^-h^hmmM^"^o 01 i: 2r#^fc-ri. 
itsRJS 1 ■> LftJ^Ji 3 <7)v -^-Tix^Hcf Si50/N'^ «y h 7 

luiefS5g$tl7t7 ^■y^^^tlg<7)|*I*^<^7 -^yUrJ'^-V -y 
AT^— 7■V^(Cl:#i•r•&>'^°^^ -rJ' (7-f;U:5'^-\'>yv'A 



f^'r-y vrnm^mi^y -y >-Af— 7Vi^^-t 

ar?V^T n«i£7 -f yU:?- ^-V -y i^a.T— 7VWcaiS-r.S^ 
•y >• jL-f— 7"VP#— (cS^'V>T1utB7 ^' )V-^^\ -yi^a. 

"r-yiv^mmL. b y Yirixi,r^my ^jv-^^-^-yi^ 

i>^>:(4^3SSrfJ5eL. ifcb >y h t'5rWx(f mrlBTi?-fe 
y-y h7 -f ;i^^"j>'i?-:fra, 

[000 1] 

naxify -f 'J y-fi^'Mzmth . 

[0002] 

[e!*Oi$1*j] >N°^r.y hjift>:XT-Al:i3V^T. MAC 
(Media Access Control : ^t -f T • T^'^XUU) 
I P (Internet Protocol : -^y^—^^-y h7'nh 3 
;U) -^rahnylx (protocol rfflfl^lllj) *-'P^^;T-y 
hV-^^PaTt-VN-^-y hiifiSr^T-StCti. CI A. <7)^ -y 
btif8^igKtf?g=5:V^Ui7>f;W:J'tfl8i:LT. HSJM^n' 
^ -y hOUI^* gfeSi- ^ 7 U :^^**fi=i5ixi. ^ i: 

[ooo3]MAc<!:{i. LAN i,Z'Mmm.m.mmimi 

-KralO^IIII^I^^V^Slftt. TCP (Transmission 
Control Protocol) TTflr^cfi^J^ilfiSr^TO I Pi:E 
!»-ttL;t. MAClCti, ilifi7cMACi:J?B$feMACfc*J 
J>0, I PCtiMftTtl Pt555fel P^*^'$)i.o 
[0004] :icr)X otay -i )V9 V ts!*, 7 

LXm^ L . Sft t^c^N-y >y h izT:P' -^X^jxh SrMffl 

Lfzi^-^iZli^ .y hfttCT;? -feX 'J X h ^ Hi 

[0005] . HStCS^-f- i 5 (c. nHor 

L-C, Jfe^feMACiiiUfiTCl Pt2:7^;U^ffi|gi:-r'i. 

4'^7)^5feMAC±3=tt/"3Mfi7C I P**, XiJ 
-y h ^(Ti'Wm A c it^jMfiTc: i P t — iSrTit 
A:':^N°ir-y h'pco^-yymmizXO. A^J^N" 

^r.y hc^JK^/igjII^^^^^. MACfcil/fl 
Pi:-gcL^ftiX{f. ^3tMACi:7-nhr3;Ui:$r7^ 
;U:5"lfl$gi:-r-g)Ti?-bXUXM -2S:JlfflL, Ti^b 
7. 'J X h dpcD^M A C i: ra h A:'3> -y h 

4'<0555feMAC±5j:t/7-nhr3;Ui:-iSrrii{f. 
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[0006] 

[0 0 07] ^ZX\ *^0«CO@W{±, T^-^^VXh 
m-th i i: J; D , 2^N°^ -y h @mc7)3g^^L/L>^N-^ -y 

[00 OS] 

mm^mm-t^ fzif><7)^&. ] i (o^wm<o^ -y b 

^jV^^^yi^^ X— 7";W^ — (::*^"v . 1 @ <0A 
:^|y\°c>- -y ^cO^^•^^ -y hffl $g2r 7 -f ^U^^-^- -y ^-^T— 7' 

L , 2 S Jjll^^A:^^N°^ -y N 
tC-PV-^Tti. in£7 -f yUrJ'^-v 'y 7";^^— IC* 

-5'V>TmrfB7 'f-'l^:^^^' -y v-jLT-— t -y 
h-rfLJS'^M^ /PrJ'^^ -y i^jLT— 7"Vl^<^rt^lc J; 0 
^ISA^5>'^•^^•y -"^^ 

[0 0 0 9] ttz. W.i(riif.W^<r^^'^'r-yVy 

fzib<7:>^n- ( 7 )U:^mm) 7&^m^$nJtii'-=5r< i: 1 
-pc73T:?-feX U X h i: , m^cOXH^^'tr 'y b<?5>'^*^ -y N 

1f#*i'®»$ixl.ii'-^<i:i^ 1-0^7)7 >f;U:5'=^-^'-y>'^ 

^' (7 'f;!^^'^^ -y v-AX— ) 2:^ 
Jjg-r-?.7'^;^:5'^^■y>'J^x-7';^^-^B£#lat, mf 

lar^ -fex 'J X h<^7 -f )V9mmt-^ LfzJ^dr -y hit 

fB7 -f^W^'^^ -y v-j-T— 7VUcaf|-r^7 ;P:5'=^-v 
.y A X- 7VwS#*#^f5 , A:'3^ -y h n'^^ -y h 'Iff 

V^Tlifie7'f;U'^'=¥-vy>'AT— T'yUarl^^L, b y h 

-5TSI^:^>'^"^■y hc7)|Ejll47t{iJ^S:¥iJ5tL, 
b-y h t^^W^{^Bui^T^'^::XUX^^r5affl-ri>7 'f;!' 



[0010] $ <^(c, *?|Bfl<7)>'N°^ -y h 7 ^ y yy 
mm-cont L^^mwrnm^t. mi^y^iv-?^^ -y 

[0011]$ h^Z. *^BJ<^VN'^ >y h 7 ^ f 

Hit, mim.^-^tvrzy >( >V'^mmcom^^y ^ 

-y i^^y—7Mzmi^^^-<y (y ^)Vi^^^ 

'yi^zL7—y')v^-) i^-f^^v^t. f-^-^-^YtfiK 

:fTt^t. B(rt5c7)7^yW^'tfffii:— gcL7t:^^°:i^•y Mfffg 
2:mrlB7 -f jV:?^^ -y v 7^1-^— t-*'3V->-t mflB 
7 -y i^:2.^—y'Mzmi-t&m%t , A:b>'N° 

iryh(r>^'<^'y Mtfg{3*tL. BlilB7'f;l^^=Jf-vyi^j. 

■r— 7VW^— tc^-c5'v%TtulB7 fl':^^^'y j.^— 7"' 
yUSrt^^L . b -y h-ttHim&y -f ;^:5'=^■^r >y >- 

[00 12] 

[^B^comt^tomMi mz. :^^m<DmM<7)mMiz'o^^ 

xmm^mmLxtm-th . 

[ 0 0 1 3 ] m ti, :^%mcOJ-^y -yVy ^ U Vi?' 

mm.commcrimm.'&^-ty'xD -y ^ mx$> o , ^m-' ^-y -y 

h n^ll|c7)Ti?-bXUX b 1 - 1~1 -n*<lSS$tL7t7 
-{ )V-^ U y i?-^-7VU 1 h , T^' -feX U X h Srjfiffl L7t 
^N*^-y h'tff$gSr7 -f^U^'^A'-yi^AX— T'/l/'StcS^i-r 
l>7-<;l^;J'^-Vyi^AT— 7';l^#*^l53i:, 7'f;W:J' 

-y i/iX— 7VW5 l,zmi-t^^'^'7^—^ ( 7 -f 
df-v-yi^iT— ) $:-^*^^7'f>'U^'^-Y-yv'A 
x-7';U=¥-^^*S4i:. 7>r^W:?^A"yi^j.-r-r 
5 tct!v^A:^-'^°^ -y hcommt fzit^im^-th 7 
-f ^L-^^^ -y£/jL7^-7VWl^^^f52i:. 7 >f 
•y JLT--7VI' 5 i; ^^-th . 
[00 14] T:J'-l2Xi;xM-l~l-nlc{4. -etl. 
^'ti 7 -^ ;u ^ ffifg*-'-t- * fLT 0 . A:^!^ v b {4 . ^ 
C07 -f ;U:^"fff#(':: J; Oy ^Ji-^ U y^J^^ix^^^ 
$>!.. Lii^L.^mmXU. l^N'^^>y bgfcoV^TJi:, 
±IB<7)J: -5 tc:. Ti^-bXUX M - 1 — 1 - n*i®ffl;S 

m>*^\ 2^^-y'yhmiD.mi. ^<^mi>z. xii^-^y-yh 

fp<0^-^y-y h'H#l;iOV%-C. y ^ Ji'iS'^^ -y i^juT—y' 
J\^^-I,ZX 0 7 ^ -y V 2 i<y ^ 

[00 15] ^LT, b'yh-rix{4\ b-y hLfcxyb 

H^tfa. tfz. b >y h L^artrntf , r^-lrXUXM 

- 1 - 1 - n $rjiistc3iffl m'^(^y ^ V yym 
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[0016] y ^ )V-S>^^ i/jL-r— 7VU=^-^RKi#ia 
A\t. T:?'-kXUXh 1 - 1~1 -n<5D7 -fyU^ffi^** 

•y hlcoV»'CT:?'-t:X!;xh 1 - 1~1 -n^riSfflf^. 
-eWN-^-y hltfgSr. 7.<;W^^A"yi^j.x-7';l'=^- 
Sr^-i: LT7 ;U:5'^^-y>-j.x-7Vl^5taML, 
±IS<73 2 o s \:m(r)X-hf^'r -y h CM-f" l> 7 -f yUrJ' ^ a- 
■y J. T— 7"Vl/ 5 X. h , 

[ 0 0 1 7 1 iJCtl. -y h 7 >f 1V9 U y^^^gcT)^ 

T^J'-fe^yxM -1 , 1-2, 1 -3arlS^L7^cfc-r 
I). tT'c, T:?'-lrXUXM -Hi|g5feMACi:iMfi7C 
I Pfc$r7'<;W^ffi^i:L. ri?-bXUxM-2{i% 

Uxh 1 — Sti^^I Pi:7°ah3yPh2:7 -f ;U:5"ftfg 

[00 1 8] I2]2(i:. n = 3c7):^-^(coV>T. 7'f;U:5' 
df ^ -y V- AT— 7';P^-:ij35c^l54 tci^7-Y;U^^A' 
.yv-jLTT-^'^W^-cO^lSiiJiSrS^-raT-*^. 112 2: 

OT^'-fe^^UXM - 1 , 1-2, 1 -3^55^7 -f;l'^' 

-r^i:)*>. T^'-feJ^UXM -1 , 1-2, 1-3CD^^ 
-ffiijAz-^t-fi^y 4 )V'$'mW'^y :^-^-ifiy ^ '^-^"^ 
-N'-y>-jL7^-7Vl-^-2-1fB5c-rS« -tfO^Jf ti:. H%M 
AC. jMflTclP, Pfcit^'7°aha;i^*^'7 -fyp 
^df.^ >y v-AT^— T'/P^— i;^^. 
[0019] T'tis ll3~I172r#BiLT*>'N'^-y h7 

[0 0 20] :7-f;P;J'=3f^r yXAf— 7';l'=^— ^ 

B£#S4{i. T:? -teX 'J X M - 1 ~ 1 - nT-^M LT 

yl^rJ'^ A' -y i^A-r— 7VU^— 

[00 2 11 \-:>B(r>J'<-tr-^v-tfiX-m'fzm^X'\i. y 

-f;U^'^-vy>'A-r-7";P5{i2&T-S)a, -tLT, 
J^-T v b07 -f yi^cJ'^-v-y v-A-r— 7";l-^— tOV^TtJO 
>'N°^^-y hffl$gti. Ti?-b;^i;:^M - 1-1 -3C7)#7 
-f^UrJ^fffgi:— ^t^v%c7)t:'. 7'f;W:?=JfA'>yi^i-r- 
7';i^ll*f53{i;, I13tc^-ri;o(c, 7 -fyP:?-^-^ ^y 
i^^^-y')V^-^zm-^^mp-^'r-j bO^N-^-y hffl^S 
S:7 -f yl^^^-v-y >-iX-7VU5 t^aia-r^. LT. 

[0022] T:7 -^7. U ;^ h 1 — 1 (Ci3U 

rti, 7-f;P^ffifl5^N'7^-^'«03Mft7nI PtXtl^"^^ 
■y h iOjMflTC I P i: {iPI t < xr^) ^ ?i5feM A C {4 
pi:yT'-l!i:L'5rV^. T^'-feX>jXM - 2t:'{i:, 5S5fe 



M A C (4 y T— gC^-i. 7'n h r?;Ui r i: a "C— ifc L 

^fc, r^-bX'J;^M-3t-{4, 555feIP{4Y 
T—m-f^tiK y°nhziMirtaT—iXL^^^. CIO 
tS*, 7-f;U:J'^A'>yi^A-f— 7VU5fc{i:. 1131=^1- 

idlc. 7 -f;u^'^A"yi^AX-7';P^-tca^#, 

^■y MflfiC7)|*IC0^^MAC Tyj , ilflTUlP 

rxj , 5u5tiP rvj , 7°a h r a J $ix 
[0023] tfz. 7 -f ^U:?^^ -y v-jlx— T'yU 5 

ii. MAlz^-tJiolz. Ti^-txV xhl- 2 ty 4 
^^^'yl^3.^-zr}V^-\,zm-:S<j-^-!r'y himtif- 
^l,tzm^\.Z},t. 7 4 JU^^-^ y AX-7';U^-tC« 
-:5•^SfS>'^•^•y h<7>ttf82r7 -f^U^^^r-y^-jLT— 7';U 

[0024] Mi^mzit. X-yy'^^-/ vo^n'r v hffifS 

UXM-2i:{i:— i!c-r.5.<7)T\ 114 1::*-^ i 3 6:, 7 
>i)V9^^ -y i^j-x— 7';l'^— lc:*^# . ^N*^-y hffi^B 

O|*I<0^5feMAC Tyj . ilftTCl P TAj , 925151 P 

[0025] mz^ 'Zr>^\m<r>XtiJ^'r -J ^^::#v^T 
{4, T^'-fe;^yxM -l~l-3J:0Mt. 7>f;U:J' 
df^-yv'jL-r— 7';U5*ijlffl$ix^. -^^r*3*>. 7'f;U 
••/ jL^~y'jl'm^^^S.2t,t. ^^°^^-y hffi^gCo 
V^T. 7 -f Jl^:^^^' -y v-jl^— tca-:3'g: 7 ^ ;P:5'^-Vy 
i^jL7^-7'yP5^:^-r-l.. I15J4. 7>f;U^'df.^.yv- 

a.T— 7Vi/5*^'ll4(:55Lfcai4r*i^oii-ar(~, ztit 
-Wi-thJ-^^'v ymm^^-th^-^^-^ vij^xfiLtzb^ 

Sr^^. :i<^i.r>\>z. 7 -f;P^^A"yi^j<.7^-:/;P5<^) 

;l'^'^A' y >'j.x-7Vt^5c7)JgS^t^-^#, •eo>'N*^«y 

[0026] — ^r, 7 ;l':?=5f -v -y i^^T— 7';l'^# 
152*^. >'N°^^-y httfUtCOV^T, 7^;U:?'=3f^.yi^j,df: 
—{zm-^^ 7 >f -y i^:x.f—y)V5^^MVfz 

ifi. \L-v\'Lti:ii-->tzm^f,zi.i. T^-feXUxM-l 
~1 -3 2:)ii<}i:tc:®fflLT(/K. ^LT. V^-m*^<^r 

i^-feXUXb, fiJ;i{4'I16tC5^:-rJ; -Jt:. T^-t>?.UX 
V\-lt—^Lfzh.^li. y 4 )V-?^^-/=y3.^—{,z 

m^t^^'y-y hmm^y 4^\^^^^yi^j.T-yj\^5i,z 

[0027] ZCDb^. m4h^^^itm5l,z^LfzXo 
IZ. gttC7 ^■^U^^^^-y v'j--f—7'VU5*^:|?ffi-r.2.mi 

OJ^Wi, mmi'Zy ^yix^=SfA'>yi^j.-r-7';U5-l 
^^fiS;L. -eONexW^ y^(>Zim<7)y 4/1-^^^ -y 

AX-7'VU5-2c7)^SflTKl/XS:f5g-ri)<, 

f*, 7 yW:?^-^ -y i-r— 7"VU 5-1 i;''c{4 5 - 2 
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[00 28] Z<7)J:ol>Z^ 1iSt<?57-f;W:J'^-vy>'jL-f 

^ -y 5-2 if^^-fh t # . A::'3>'N° 

I) t , 7 ^ ^ -y A f— 7"VW 5 - 2 

jlitL/ila]— 7n— yN-ir.y >f /t-^ U yi/miJ<7)J^ 
[00 29] 

[i^Bjio^m] ^mmTii. ±mcdj:^i>z. t^-^xu 

Xhfc— ScL;t>'N'^>y h'tf?S2r7'f;W:5'='f^-yv'j>.7^- 

t-f. 7 -f /P^^-v-y v-jlt"— ^Vl^Srl^^Ls t -y bt" 
ixl£r-~y-J]^<7)iHmi,z Lfzij^-oXTdlJ-^-y -y h SrteM^ 

7 i^:?' Aa<J^ h 7 :7 -f >y j&^i!'-^: < . h 61)^ h ^ 

[HM^o^m^SiBJ] 

[HI] 2is:^aJ<7)>'^°^^ y h 7 -f U >-i7"^S<75||M 
[02] 2|5:^BJt=:t3ft.&7-f;P:5'^-vyi^A7^— r-'U 



[03 ] 7 yW^-^-r -y v-AT^-^VL-^^^COii-^T'. 

T^-bx 'J X M - 2 i,z-w:Ltzm^(r)mi'^7T=.-tm. 

[05] 7 ^yU^-^f-^-yS^jLT— y/Hct -y hL7^:!J® 
-&«O«^Sr^-f-0. 

[06] y A)l'-S'^^'yi^Ay-~y)Vi}n-:>^m^ix 

-r0. 

[07] 7-f;l^:J'^^>yi^jLX-r;W3!/>'2^a#*Sn 

0. 

[08] mk(r>y ^ )V'S'^jyy:fj^^^-tm. 



1 
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[02] 




7 Y y i/i 
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SRC MAC 


DSr^MAC 
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[US] 



SRC_MAC=* 
DST MAC=y 

DST IP=Y 



DST MAOp 
SRC^IP^X 



DST_MAC=y 
Protocol- 7 



DST IP=Y 
P»otocDl= r 



1^' 



DST_MAC 
SRC_IP 
DST_IP 
Protocol 



-1-2 



7 -f ;w * ^ .y a- 



DST_MAO=y 
SRC^U»=X 

Ptotocol= or 



|Neimr=imij 

L (niii) 



^5 7y*r*+»5'a 



[114] 



SRC_MAC=* 
DST MAC=y 
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